Please use this identifier to cite or link to this item: http://cmuir.cmu.ac.th/jspui/handle/6653943832/76277
Title: Releasing ARP data with differential privacy guarantees for LAN anomaly detection
Authors: Norrathep Rattanavipanon
Donlapark Ponnoprat
Hideya Ochiai
Kuljaree Tantayakul
Touchai Angchuan
Sinchai Kamolphiwong
Authors: Norrathep Rattanavipanon
Donlapark Ponnoprat
Hideya Ochiai
Kuljaree Tantayakul
Touchai Angchuan
Sinchai Kamolphiwong
Keywords: Computer Science;Engineering;Physics and Astronomy
Issue Date: 19-May-2021
Abstract: Anomaly detection has emerged as a popular technique for detecting malicious behaviors in local area networks (LANs). Various aspects of LAN anomaly detection have been widely studied. Nonetheless, the privacy concern about individual users or their relationship in LAN has not been thoroughly explored in the prior work. In some realistic cases, the anomaly detection analysis needs to be carried out by an external party, located outside the LAN. Thus, it is important for the LAN admin to release LAN data to this party in a private way in order to reveal no information about LAN users; at the same time, the released data must also preserve the utility of being able to detect anomalies. This paper investigates the possibility of privately releasing ARP data that can later be used to identify anomalies in LAN. We present two approaches and show that they satisfy different levels of differential privacy - a rigorous and provable notion for quantifying privacy loss in a system. Our real-world experimental results confirm practical feasibility of our approaches. With a proper privacy budget, both of our approaches preserve more than 90% utility of the released data.
URI: https://www.scopus.com/inward/record.uri?partnerID=HzOxMe3b&scp=85112829517&origin=inward
http://cmuir.cmu.ac.th/jspui/handle/6653943832/76277
Appears in Collections:CMUL: Journal Articles

Files in This Item:
There are no files associated with this item.


Items in CMUIR are protected by copyright, with all rights reserved, unless otherwise indicated.